The vulnerability CVE-2025-67990 affects RealMag777 GMap Targeting (<= 1.1.7) and is classified as a reflected cross-site scripting (XSS) issue. It occurs due to improper neutralization of input during web page generation, enabling attackers to inject and execute arbitrary scripts in users' browsers when they interact with crafted URLs or inputs. The CVSS 3.1 base score is 7.1, indicating high severity with network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and impacts on confidentiality, integrity, and availability rated as low.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary scripts in the context of the victim's browser session, potentially leading to theft of sensitive information, session hijacking, or other malicious actions. The impact is rated as limited (low) on confidentiality, integrity, and availability, but the overall severity is high due to the ease of exploitation over the network without privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor vendor communications for updates. In the meantime, applying input validation and output encoding on user-supplied data in the application could help mitigate the risk. Avoid clicking on suspicious links that may exploit this vulnerability.